F5 big-IP AWAF - Best Practices

Question

Hello Every one , &nbsp;kindly i need to know what is the Best Practices to review the AWAF Policy . If some one have like DOC or check list or standard questions to ask that would be great . &nbsp;Thank you in advance

samstep · Answer

Check out K07359270: Succeeding with application security&nbsp;&nbsp;https://support.f5.com/csp/article/K07359270

sebastiansierra · Answer

Hi,For AWAF, F5 implemented an owasp top ten dashboards that can help you, and guide you in the deployment of all the security features in each asm policy, you must have running Big-ip V15,https://community.f5.com/t5/technical-articles/a-basic-owasp-2017-top-10-compliant-declarative-waf-policy/ta-p/289017Additionally, let me share with you an amazing guide to operate ASM:https://support.f5.com/csp/article/K85426947

Forum Discussion

F5 big-IP AWAF - Best Practices

Recent Discussions

Rewriting Location Header in iRule

010713d0:3: Symmetric Unit Key decrypt failure - decrypt failure Rseries Tenant ..

Help with Migrating Netscaler Rewrite Policy to F5 LTM

Need to change HTML tag in HTTP response

Outlook application issue

Related Content

Manage F5 BIG-IP Advanced WAF Policies with Terraform (Best Practices)

Re: Get Started with BIG-IP Virtual Edition (VE), BIG-IQ VE or BIG-IP Cloud Edition Trial

F5 SLEDFest 2022 Tallahassee Edition - Best Practices for Securing your BIG-IP presentation

A small script to export all AWAF policies from a BIG-IP device.

Service discovery and registration with BIG-IP